Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
File: 1T5Pyhar83QtTaK_nD2abpHpbuU.mft (raw, json)
Hash identifier: cbto3FxN82tlrqnIC5wTVPAkjcbDQfTaw4YHPCXf8Gg=
Subject key identifier: 40:80:4A:3F:45:11:FF:8E:A9:7D:92:46:07:56:0C:EE:77:BD:64:75
Authority key identifier: D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
Certificate issuer: /CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Certificate serial: 01963B0A87CBC13FFF890563499E59B97E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
Manifest number: 1203
Signing time: Tue 15 Apr 2025 20:01:07 +0000
Manifest this update: Tue 15 Apr 2025 20:01:07 +0000
Manifest next update: Wed 16 Apr 2025 20:01:07 +0000
Files and hashes: 1: 1T5Pyhar83QtTaK_nD2abpHpbuU.crl (hash: kfhe3V+PvFPSDYLonSQQmVPUaS2PpGJ8ZSFiRnflzfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 20:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:0a:87:cb:c1:3f:ff:89:05:63:49:9e:59:b9:7e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Validity
Not Before: Apr 15 20:01:07 2025 GMT
Not After : Apr 16 20:01:07 2025 GMT
Subject: CN=40804a3f4511ff8ea97d924607560cee77bd6475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7f:01:d8:7c:be:92:42:0d:72:8d:87:b5:d2:
df:96:95:73:97:b0:4f:a1:36:97:8e:e2:82:26:63:
77:1b:bb:94:1d:8d:a8:50:b1:eb:02:63:af:3e:86:
5e:52:a9:e5:16:a5:65:b1:19:a1:6f:10:51:62:65:
03:a5:0c:d1:21:8b:64:f7:7f:e2:88:b5:b2:94:8d:
35:84:fb:d4:82:15:d6:fe:3e:40:7f:49:d1:ad:c0:
51:1b:cd:0b:86:16:a9:60:e5:9e:49:43:9d:62:25:
b2:d5:f4:58:4c:6a:de:02:09:3b:a7:ae:50:d6:21:
fa:55:b4:63:4b:69:d4:aa:11:02:c7:83:45:09:e0:
86:92:48:09:96:28:e2:67:6c:ec:b4:eb:bf:d2:3b:
23:7e:6a:aa:98:f9:21:c1:99:15:fa:91:19:49:c0:
69:0c:ca:a7:19:f5:a1:02:27:1b:a3:63:6e:ef:4a:
ab:81:44:c8:9a:4f:0b:7f:4f:22:73:c4:33:8a:51:
e8:0e:dd:df:70:14:51:bc:f7:24:73:6d:8f:09:b5:
29:e6:39:0a:7e:45:d7:20:43:fb:4e:c4:3e:55:cd:
3d:b1:52:e3:06:05:74:e9:8a:26:86:97:0f:3f:82:
67:02:91:5b:f5:59:4c:cd:ed:07:f5:9b:d4:84:08:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:4A:3F:45:11:FF:8E:A9:7D:92:46:07:56:0C:EE:77:BD:64:75
X509v3 Authority Key Identifier:
keyid:D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6a:58:a3:66:c8:d2:ba:a6:3b:0b:97:75:cf:42:4b:10:e5:
b2:ba:a6:2d:a7:92:e5:71:5c:dc:d7:02:e7:c3:dd:39:a0:d8:
1c:c7:c8:1a:08:12:9e:e8:8f:6c:01:24:d7:3d:a2:6f:88:9f:
eb:fe:82:bb:67:c2:b3:21:13:50:77:c3:da:c2:c3:a2:33:24:
d1:84:b5:46:a1:2b:34:e1:ad:d2:da:74:cb:57:85:b1:05:67:
c6:05:7c:16:58:51:7b:d7:57:7e:f8:f3:99:74:ea:02:cd:5d:
8a:04:e8:39:f8:58:a3:4c:3c:a1:f6:e5:c7:18:46:06:89:ee:
ed:43:be:db:ab:8f:4b:55:f7:da:19:6b:b5:2b:fe:ea:b1:49:
14:6f:f8:66:c3:07:89:8a:85:4a:52:03:4b:83:34:f3:ff:59:
af:ab:d8:df:20:8a:6d:6a:60:1a:68:9c:cc:1f:a8:04:07:98:
b4:58:c0:62:90:87:e8:af:bf:18:aa:de:f5:ec:22:40:91:0a:
52:aa:59:ac:05:23:28:72:5e:62:30:ae:d7:ce:ac:62:84:27:
ab:36:4e:a9:dd:11:a0:6d:5c:42:53:65:04:f5:8a:3f:b6:75:
eb:34:12:6c:25:ce:ad:24:4c:6d:fe:0e:3a:7f:74:0e:ff:fe:
bf:14:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:43:38 2025 by rpki-client